Various API calls return a symbolic expression (rights ...), where ... is a sequence of zero or more symbols. These symbols encode the access rights the user currently has.
Valid symbols are: create, read, update, and delete.
Symbol Meaning for user
create May create a new zettel
read May read the zettel
update May update the zettel
delete May delete the zettel
In practice, not all combinations of rights occur. A Zettelstore in read-only mode always returns the symbol read. A Zettelstore started by double-clicking returns either the expression (rights read update) or the expression (rights create read update delete) (all operations are allowed).
If you have added an additional user to your Zettelstore, the returned rights may differ. The access rights are determined by the enabled authentication settings, the user role of the current user, the visibility rules for a given zettel, and the read-only status for the zettel.